CVE Database
8818 results
| CVE ID | Severity | CVSS | Description | MITRE TTPs | Flags | Published |
|---|---|---|---|---|---|---|
| CVE-2026-113603 | MEDIUM | 6.5 | The x402 SIWX server extension in @x402/extensions 2.3.1 through 2.28.0, x402 PyPI 2.11.0 through 2.… | — |
|
2026-10-20 |
| CVE-2026-113602 | MEDIUM | 5.3 | json-smart through 2.6.0 contains an input validation bypass vulnerability that allows attackers to … | — |
|
2026-10-20 |
| CVE-2026-113601 | MEDIUM | 4.3 | Memos before 0.27.0 contains a missing authorization vulnerability in the ActivityService ListActivi… | — |
|
2026-10-20 |
| CVE-2026-113600 | MEDIUM | 5.4 | Fat Free CRM before 0.26.0 contains an insecure direct object reference vulnerability that allows au… | — |
|
2026-10-20 |
| CVE-2026-113599 | MEDIUM | 5.4 | Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenti… | — |
|
2026-10-20 |
| CVE-2026-113598 | MEDIUM | 4.3 | Modoboa before 2.8.0 contains an insecure direct object reference vulnerability that allows authenti… | — |
|
2026-10-20 |
| CVE-2026-113597 | MEDIUM | 5.4 | Blinko through 1.8.8 contains an insecure direct object reference vulnerability in the tag tRPC rout… | — |
|
2026-10-20 |
| CVE-2026-113595 | MEDIUM | 4.3 | Sharkord before 0.0.26 contains a missing authorization vulnerability in the others.changeLogo tRPC … | — |
|
2026-10-20 |
| CVE-2026-113594 | MEDIUM | 5.4 | Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated m… | — |
|
2026-10-20 |
| CVE-2026-113359 | MEDIUM | 4.3 | Baserow before 2.3.0 contains a missing authorization vulnerability that allows any authenticated us… | — |
|
2026-10-20 |
| CVE-2026-112956 | MEDIUM | 6.5 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-expo… | — |
|
2026-10-20 |
| CVE-2026-112955 | MEDIUM | 6.5 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.7.1 of the import-expo… | — |
|
2026-10-20 |
| CVE-2026-112954 | MEDIUM | 5.3 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, a public REST AP… | — |
|
2026-10-20 |
| CVE-2026-112952 | MEDIUM | 4.3 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, 'POST /api/v1/@a… | — |
|
2026-10-20 |
| CVE-2026-112951 | MEDIUM | 5.4 | ApostropheCMS is an open-source Node.js content management system. Prior to 4.34.0, the color field … | — |
|
2026-10-20 |
| CVE-2026-112950 | MEDIUM | 5.9 | Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 4.1.11 until … | — |
|
2026-10-20 |
| CVE-2026-112949 | MEDIUM | 4.7 | Vitest is a Vite-native testing framework for JavaScript and TypeScript projects. From 2.1.0-beta.7 … | — |
|
2026-10-20 |
| CVE-2026-112948 | MEDIUM | 6.5 | Vitest is a testing framework powered by Vite. From 5.0.0-beta.6 until 5.0.5, Vitest dev servers can… | — |
|
2026-10-20 |
| CVE-2026-112840 | MEDIUM | 6.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | — |
|
2026-10-20 |
| CVE-2026-112829 | MEDIUM | 5.3 | Missing Authorization vulnerability in Arraytics Booktics booktics allows Exploiting Incorrectly Con… | — |
|
2026-10-20 |